In the specification: 



Please remove the Summary after the paragraph beginning on page 1, line 19 of the 
application as amended. 

SUMMARY 

According to an e xampl e e mbodim e nt, a m e thod of operating a network processor 
includes writing, to a shared memory acc e ssibl e by multiple pack e t proc e ssing e ngines, a 
dynamic packet rule set, e ach rul e specifying a packet offset, a data patt e rn, and an action 
code. Th e m e thod furth e r includ e s writing, to an instruction stor e for th e packet proc e ssing 
e ngin e s, ex e cution instructions ref e rencing th e dynamic pack e t rule s e t. The m e thod furth e r 
includes, on at l e ast one of the packet proc e ssing engines, whil e processing a packet and in 
r e spons e to th e ex e cution instructions, loading a first packet rule from th e dynamic packet 
rule set, comparing pack e t data at th e pack e t offset sp e cified in th e first packet rule to the data 
pattern specified in th e first pack e t rul e , and, when th e comparison indicat e s a match, 
performing an action indicated by the action code sp e cifi e d in th e first packet rule. 

According to anoth e r e xample e mbodim e nt, an integrated circuit includ e s a local 
m e mory capabl e of storing a rul e table, the rul e table organized with e ntries comprising a 
pack e t offs e t, a data pattern, and an action. The integrat e d circuit further includ e s a pack e t 
data qu e ue to receive packet data, a rule f e tch unit to f e tch rules from the rul e tabl e , and a 
packet data f e tch unit to f e tch a segment of packet data from the pack e t data queue, bas e d on 
th e pack e t offset fetch e d by the rul e fetch unit. Th e int e grated circuit further includes match 
circuitry to compare the packet data s e gm e nt f e tched by the pack e t data f e tch unit with th e 
data pattern f e tched by the rul e f e tch unit and an action unit to p e rform th e action f e tched by 
the rule fetch unit when the match circuitry indicates a match b e tw ee n th e compared packet 
data s e gm e nt and data patt e rn. 

According to anoth e r e xampl e embodim e nt, a m e thod of gath e ring statistics on 
packets r e c e ived by a n e twork processor, includ e s configuring a core proc e ssor to 
dynamically acc e pt packet rule requests and plac e corr e sponding packet rul e s in a packet rul e 
set area at a first memory region in an addressable memory spac e , at least on e rul e in the 
pack e t rul e s e t specifying a pack e t offs e t, a data pattern, and a counter offset. The method 
further includ e s configuring a set of pack e t proc e ssing engin e s to s e qu e nce through th e 
pack e t rule s e t, r e trieving on e of th e packet rules from the first memory region and comparing 
packet data from a received packet, at the offs e t specifi e d in th e r e tri e ved pack e t rul e , to the 
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data patt e rn specifi e d in th e retrieved packet rule, and, wh e n the comparison e valuates tru e , 
incr e m e nting a count e r, at the count e r offs e t specifi e d in th e r e triev e d packet rul e , within a 
second m e mory r e gion in th e addr e ssabl e m e mory space. The method further includes 
configuring the core processor to r e tri e v e statistics from th e count e rs in th e second memory 
r e gion. 

According to another e xampl e e mbodiment, an articl e of manufacture includes 
computer r e adabl e m e dia containing instructions that, when e x e cuted by a network processor, 
cause that n e twork proc e ssor to perform a method that includes dynamically acc e pting packet 
rul e r e qu e sts at a cor e proc e ssor and placing corr e sponding pack e t rul e s in a pack e t rul e s e t 
ar e a at a first m e mory region in an addressabl e m e mory spac e , at least one rule in the packet 
rul e s e t sp e cifying a pack e t offs e t, a data pattern, and a count e r offset. Th e m e thod further 
includes sequencing through th e pack e t rul e s e t with a s e t of pack e t proc e ssing engines, 
r e tri e ving on e of the pack e t rul e s from th e first memory region and comparing packet data 
from a r e c e iv e d pack e t, at th e offset sp e cified in th e r e tri e v e d pack e t rul e , to th e data pattern 
sp e cified in th e r e triev e d packet rul e , and, when th e comparison e valuates true, incr e m e nting 
a counter, at the counter offset sp e cifi e d in the retriev e d packet rul e , within a s e cond memory 
region in th e addressable m e mory space. The method furth e r includ e s th e cor e proc e ssor 
retri e ving statistics from the count e rs in the s e cond m e mory r e gion for distribution outsid e of 
the n e twork processor. 

According to another example embodim e nt, an article of manufactur e includ e s 
comput e r r e adabl e m e dia containing instructions that, when executed by a n e twork processor, 
caus e that network processor to perform a method that includes a core proc e ssor writing, to a 
shared memory acc e ssibl e by the pack e t processing engin e s, a dynamic pack e t rul e set, e ach 
rul e specifying a pack e t offs e t, a data patt e rn, and an action cod e . Th e method further 
includ e s, on at least on e pack e t proc e ssing engine, while processing a packet, loading a first 
pack e t rule from th e packet rule s e t, comparing packet data at th e pack e t offset specified in 
th e first pack e t rule to th e data patt e rn sp e cifi e d in th e first packet rul e , and, when th e 
comparing step indicat e s a match, performing the action indicated by th e action code 
specified in the first packet rule. 
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